New open-source tool connects the dots between suspicious activities during a cyber attack